Systems and methods for selective patching based on kernel and user space interaction

A system for selective patching processes, the system comprising:

• a hardware processor configured to:
• identify, via a user space patching service, a patch that modifies at least one function comprised in a process, wherein the process is executed on a computing device;
• generate a list of target pages in virtual memory of the computing device, wherein the list of target pages comprises code associated with the at least one function;
• mark the target pages as non-executable based on file identification;
• and
• in response to intercepting, using an amended page-fault event handler, an attempt to execute the code associated with the at least one function by the process, apply the patch to modify the at least one function.

A non-transitory computer readable medium storing thereon computer executable instructions for selective patching processes, including instructions for:

• identifying, via a user space patching service, a patch that modifies at least one function comprised in a process, wherein the process is executed on a computing device;
• generating a list of target pages in virtual memory of the computing device, wherein the list of target pages comprises code associated with the at least one function;
• marking the target pages as non-executable based on file identification;
• and
• in response to intercepting, using an amended page-fault event handler, an attempt to execute the code associated with the at least one function by the process, applying the patch to modify the at least one function.